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I claim: 



1 1. A method of assuring that a message sent to a 

2 recipient was requested for opening by the recipient, the 

3 method comprising: 

4 encrypting a message using a session key to produce 

5 an encrypted message; 

6 encrypting the session key using a public key to 

7 produce an encrypted session key; 

8 generating a transaction identifier; 

9 encrypting the transaction identifier to provide an 

10 encrypted transaction identifier; 

11 sending, by the sender, the encrypted session key 

12 and the transaction identifier to an arbiter; 

13 sending, by the sender, the encrypted message and 

14 the encrypted transaction identifier to the recipient; 

15 generating a request for the encrypted session key 

16 based on the transaction identifier; 

17 sending the request to the arbiter; and 

18 generating, by the arbiter, evidence that the 

19 request for the encrypted session key was received. 

1 2. The method of claim 1 wherein the request comprises 

2 the transaction identifier and said generating evidence 

3 comprises logging that the transaction identifier was 

4 received. 



3. The method of claim 1 wherein the request comprises 
the transaction identifier in unencrypted form such that 
the arbiter does not perform any cryptographic operations 
to extract the transaction identifier from the request. 

4. The method of claim 1 wherein the arbiter does not 
receive the encrypted message delivered from the sender 
to the recipient. 

5. The method of claim 1 further comprising notifying, 
by the arbiter, the sender of the request. 

6. The method of claim 5 wherein said notifying 
comprises sending an e-mail to the sender. 

7. The method of claim 1 wherein the request is 
repeatedly transmitted for a predetermined period of time 
by the recipient until the encrypted session key is 
received. 

8. The method of claim 1, further comprising: 
signing the decrypted transaction identifier, 

wherein said transmitting the request comprises sending 
the signed decrypted transaction identifier to the 
arbiter . 
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1 9. The method of claim 1 wherein said generating the 

2 request comprises : 

3 decrypting, using the recipient's private key, the 

4 transaction identifier from the encrypted transaction 

5 identifier to provide a decrypted transaction identifier; 

6 signing the decrypted transaction identifier and a 

7 nonce associated with that recipient; and 

8 sending the signed decrypted transaction identifier 

9 and the nonce to the arbiter. 

1 10. A system to assure that a message was requested for 

2 opening, comprising : 

3 a sender to send encrypted decoding information and 

4 an encrypted message; 

5 an arbiter to store the encrypted decoding 

6 information; and 

7 a recipient to receive the encrypted message, 

8 request the encrypted decoding information, decrypt the 

9 encrypted decoding information and decrypt the encrypted 

10 message using the decrypted decoding information; 

11 wherein the arbiter, in response to receiving the 

12 request, generates evidence that the request was 

13 received. 

1 11. The system of claim 10 wherein the sender also sends 

2 a transaction identifier to the arbiter, the sender also 

3 sending an encrypted transaction identifier to the 

4 recipient, the transaction identifier being associated 

5 with the encrypted decoding information, the arbiter 
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6 storing the associated transaction identifier and the 

7 encrypted decoding information, wherein the recipient 

8 decrypts the transaction identifier and requests the 

9 decoding information using the transaction identifier, 

10 and the arbiter returns the encrypted decoding 

11 information associated with that transaction identifier 

12 to the recipient. 

1 12. A method of operating a recipient's messaging system 

2 to assure that a message sent to a recipient was 

3 requested for opening by the recipient, the method 

4 comprising: 

5 receiving an encrypted message that was encrypted 

6 using a session key; 

7 receiving an encrypted transaction identifier 

8 associated with the encrypted message; 

9 decrypting the transaction identifier; 

10 generating a request for the encrypted session key 

11 based on the transaction identifier; 

12 sending the request to an arbiter; 

13 receiving the encrypted session key; 

14 decrypting the encrypted session key to provide a 

15 decrypted session key; and 

16 decrypting the encrypted message using the decrypted 

17 session key. 
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1 13. A method of operating a sender's messaging system 

2 to assure that a message sent to a recipient was 

3 requested for opening by the recipient, the method 

4 comprising: 

5 encrypting a message using a session key to provide 

6 an encrypted message; 

7 encrypting the session key to provide an encrypted 

8 session key; 

9 generating a transaction identifier; 

10 encrypting the transaction identifier to provide an 

11 encrypted transaction identifier; 

12 sending the encrypted transaction identifier and the 

13 encrypted session key to an arbiter server; 

14 sending the encrypted message and the encrypted 

15 session key to a recipient; and 

16 receiving a notification, from the arbiter, in 

17 response to a request from the recipient for the 

18 encrypted session key based on the transaction 

19 identifier. 

1 14. A method of operating a messaging system on an 

2 arbiter server to assure that a message sent to a 

3 recipient was requested for opening by the recipient, the 

4 method comprising: 

5 receiving a transaction identifier and an associated 

6 encrypted session key; 

7 receiving a request, from recipient, to send the 

8 encrypted session key to that recipient, the request 

9 comprising the transaction identifier; 
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10. returning, in response to the request, the encrypted 

11 session key associated with the transaction identifier in 

12 the request; and 

13 generating evidence that the request to send the 

14 encrypted session key was received. 

1 15. A recipient's messaging system comprising: 

2 a memory to store instructions and data; 

3 a processor to execute the instructions stored in the 

4 memory; 

5 the memory to store: 

6 an encrypted message that was received from a 

7 sender; 

8 one or more instructions to decrypt an encrypted 

9 transaction identifier to provide a decrypted transaction 

10 identifier; 

11 one or more instructions to generate a request for 

12 an encrypted session key based on the transaction 

13 identifier; 

14 one or more instructions to send the request to an 

15 arbiter; 

16 one or more instructions to receive the encrypted 

17 session key; 

18 one or more instructions to decrypt the encrypted 

19 session key to provide a decrypted session key; and 

20 one or more instructions to decrypt the encrypted 

21 message using the decrypted session key. 
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1 16. A sender's messaging comprising: 

2 a memory to store instructions and data; 

3 a processor to execute the instructions stored in the 

4 memory; 

5 the memory to store: 

6 one or more instructions to encrypt a message using 

7 a session key to provide an encrypted message; 

8 one or more instructions to encrypt the session key 

9 to provide an encrypted session key; 

10 one or more instructions to generate a transaction 

11 identifier; 

12 one or more instructions to encrypt the transaction 

13 identifier to provide an encrypted transaction 

14 identifier; 

15 one or more instructions to send the transaction 

16 identifier and the encrypted session key to an arbiter 

17 server; 

18 one or more instructions to send the encrypted 

19 message, the encrypted transaction identifier and the 

20 encrypted session key to a recipient; and 

21 one or more instructions to receive a notif ication, 

22 from the arbiter, in response to a request from the 

23 recipient for the encrypted session key based on the 

24 transaction identifier. 

1 17. An arbiter comprising: 

2 one or more instructions to receive a transaction 

3 identifier and an encrypted session key; and 
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4 one or more instructions to receive a request, from 

5 at least one recipient, to send the encrypted session key 

6 to that recipient, the request comprising the transaction 

7 identifier associated with that recipient. 

1 18. The arbiter of claim 17 further comprising: 

2 one or more instructions to return, in response to 

3 the request, the encrypted session key associated with 

4 the transaction identifier in the request. 

1 19. The arbiter of claim 17 further comprising: 

2 one or more instructions to generate evidence that 

3 the request to send the encrypted session key was 

4 received by matching stored transaction identifiers with 

5 the transaction identifier from the request and logging 

6 that the request was received. 

1 20. An article of manufacture comprising a computer 

2 usable medium having computer readable program code 

3 embodied therein for assuring that a message sent to a 

4 recipient was received by the recipient, comprising 

5 instructions to: 

6 encrypt a message using a session key to produce an 

7 encrypted message; 

8 encrypt the session key using a public key to 

9 produce an encrypted session key; 

10 generate a transaction identifier; 

11 encrypt the transaction identifier to provide an 

12 encrypted transaction identifier; 
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13 send the encrypted session key and the transaction 

14 identifier to an arbiter; 

15 send the encrypted message and the encrypted 

16 transaction identifier to a recipient; 

17 generate a request for the encrypted session key 

18 based on the transaction identifier; 

19 send the request to the arbiter; and 

20 generate, by the arbiter, evidence that a request 

21 for the encrypted session key was received. 

1 21. The article of manufacture of claim 20 further 

2 comprising instructions to notify the sender that the 

3 request was received. 

1 22. An article of manufacture comprising a computer 

2 usable medium having computer readable program code 

3 embodied therein for operating a recipient computer 

4 system to assure a sender that a message sent to the 

5 recipient was received by the recipient, comprising 

6 instructions to: 

7 decrypt an encrypted transaction identifier to 

8 provide a decrypted transaction identifier; 

9 generate a request for an encrypted session key 

10 based on the transaction identifier; 

11 send the request to an arbiter; 

12 receive the encrypted session key; 

13 decrypt the encrypted session key to provide a 

14 decrypted session key; and 
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15 decrypt the encrypted message using the decrypted 

16 session key. 

1 23. An article of manufacture comprising a computer 

2 usable medium having computer readable program code 

3 embodied therein for operating a sender's computer system 

4 to assure the sender that a message sent to a recipient 

5 was received by the recipient, comprising instructions 

6 to : 

7 encrypt a message using a session key to provide an 

8 encrypted message; 

9 encrypt the session key to provide an encrypted 

10 session key; 

11 generate a transaction identifier; 

12 encrypt the transaction identifier to provide an 

13 encrypted transaction identifier; 

14 send the encrypted transaction identifier and the 

15 encrypted session key to an arbiter server; 

16 send the encrypted message and the encrypted session 

17 key to a recipient; and 

18 receive a notification, from the arbiter, in 

19 response to a request from the recipient for the 

20 encrypted session key based on the transaction 

21 identifier. 

1 24. An article of manufacture comprising a computer 

2 usable medium having computer readable program code 

3 embodied therein for operating an arbiter computer system 

4 to assure the sender that a message sent to a recipient 
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5 was received by the recipient, comprising instructions 

6 to: 

7 receive a transaction identifier and an encrypted 

8 session key; and 

9 receive a request, from at least one recipient, to 

10 send the encrypted session key to that recipient, the 

11 request comprising the transaction identifier associated 

12 with that recipient. 

1 25. The article of manufacture of claim 24 further 

2 comprising one or more instructions to return, in 

3 response to the request, the encrypted session key 

4 associated with the transaction identifier in the request 

5 to the recipient. 

1 26. The article of manufacture of claim 24 further 

2 comprising one or more instructions to generate evidence 

3 that the request to send the encrypted session key was 

4 received. 



